Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/SeRtUU2B6pNKJo7WS138K33_tgg.roa
File: SeRtUU2B6pNKJo7WS138K33_tgg.roa (raw, json)
Hash identifier: JjpDk6IuQpXZIhrv7aLEeIcuN3nDfXEytc62+erhv2Q=
Subject key identifier: 49:E4:6D:51:4D:81:EA:93:4A:26:8E:D6:4B:5D:FC:2B:7D:FF:B6:08
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0192D96DB0A488935AED9841D2C292D8C1DC
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/SeRtUU2B6pNKJo7WS138K33_tgg.roa
Signing time: Tue 29 Oct 2024 17:58:17 +0000
ROA not before: Tue 29 Oct 2024 17:58:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60754
IP address blocks: 93.170.1.0/24 maxlen: 24
95.47.112.0/22 maxlen: 24
146.120.160.0/22 maxlen: 24
146.120.164.0/23 maxlen: 24
146.120.166.0/24 maxlen: 24
146.158.58.0/23 maxlen: 24
146.158.58.0/24 maxlen: 24
146.158.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d9:6d:b0:a4:88:93:5a:ed:98:41:d2:c2:92:d8:c1:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Oct 29 17:58:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49e46d514d81ea934a268ed64b5dfc2b7dffb608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bd:dd:28:5f:b1:3e:5f:03:01:3e:f5:0c:cb:
9a:6b:95:e8:b9:88:fc:a2:8d:00:75:6f:dc:a2:8c:
c4:c3:7b:df:fa:27:d5:77:7a:19:9a:2f:a7:fc:b0:
d0:04:d2:25:c0:06:7a:9c:6c:31:89:50:11:9a:16:
58:ba:ed:50:c0:71:31:82:e9:a9:cf:12:2f:00:00:
33:c8:82:41:c6:8b:79:88:9f:e5:dd:da:07:15:85:
06:bd:26:e2:c6:f1:99:67:f2:55:76:fb:47:95:0a:
26:5c:12:eb:f0:d9:ea:2e:23:0e:1c:86:4c:5a:9b:
31:a9:18:de:8b:3d:1b:7a:85:42:91:12:fe:60:56:
d2:d3:34:e1:92:68:3c:86:fc:1d:36:22:a8:38:36:
52:6e:9a:a8:fe:89:8c:e5:48:64:f5:03:f3:ed:68:
c0:ee:89:9d:ce:c6:54:cf:63:a5:4a:ca:12:60:5b:
c3:6a:cf:27:42:ef:1b:d7:c1:05:fd:02:45:6e:59:
74:5c:eb:f6:84:66:21:49:be:4a:82:67:3e:7b:e6:
1a:1c:d1:f4:d5:ae:71:00:34:9d:b2:93:6d:91:06:
f4:0e:52:cc:a8:4e:12:f7:ea:e7:a4:ab:ee:c9:bb:
7c:da:64:a5:00:14:36:23:43:c1:1e:b2:b8:61:d5:
e2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E4:6D:51:4D:81:EA:93:4A:26:8E:D6:4B:5D:FC:2B:7D:FF:B6:08
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/SeRtUU2B6pNKJo7WS138K33_tgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.1.0/24
95.47.112.0/22
146.120.160.0-146.120.166.255
146.158.58.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:b4:35:57:d5:39:7a:2d:41:81:09:4c:31:00:8b:9d:88:eb:
f3:04:21:92:c5:b5:2a:65:43:56:c9:d9:c6:47:7a:ca:c9:4a:
bc:c7:02:77:10:7a:11:f1:09:aa:90:6d:d1:44:24:cc:dc:8d:
d3:dd:ed:0a:4c:0d:fb:c0:12:04:a3:c0:98:ab:78:eb:32:8b:
2c:ea:20:57:0a:ad:4f:56:cb:38:03:3f:bf:44:dc:7c:1b:35:
32:09:63:be:7c:5a:9d:df:95:e4:db:e6:12:a3:b4:e2:81:49:
5b:35:02:ac:35:b6:c6:41:d7:5d:a3:59:c3:2b:17:a3:2f:e0:
fe:32:31:68:a4:82:e3:4a:cf:60:a7:86:7d:17:33:8f:d6:59:
80:75:58:26:0a:23:8e:3d:9f:4b:83:44:1d:a0:6b:6e:3a:6c:
d7:64:e9:e6:f0:61:cd:40:cd:0d:c3:ce:54:bb:ca:29:63:69:
82:fc:a3:c8:70:4b:1c:ec:a0:49:f8:70:5c:33:4c:e5:37:29:
08:1f:7d:6e:1e:5d:ae:8d:25:cc:b1:37:3a:4e:b1:5d:01:2b:
a7:bf:76:88:82:fe:52:16:96:64:f8:01:7a:e8:5b:2f:2e:39:
df:47:60:12:d1:c5:bd:83:31:d3:3b:f7:4d:1c:9c:04:d3:d6:
2a:ac:6d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:44:12 2025 by rpki-client